Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb49f5e7-290c-3d5e-a153-9737a1c938d7.roa
File:                     cb49f5e7-290c-3d5e-a153-9737a1c938d7.roa (raw, json)
Hash identifier:          j/6bEwbp+Br0SwtX6Wn6xwfdtgo7RKyRXzUgK03BqVM=
Subject key identifier:   57:74:D2:15:B2:42:98:84:D6:73:D9:1C:49:48:28:DC:16:02:E0:7F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2AC038B084E016F68BF480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb49f5e7-290c-3d5e-a153-9737a1c938d7.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:c0:38:b0:84:e0:16:f6:8b:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=77f1fbbf-5382-408c-a1d3-4c8456b1e180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:f9:60:df:8d:2a:11:dc:14:a3:6b:e7:6e:
                    40:f2:cc:0f:65:b1:22:24:e9:65:62:35:31:96:b6:
                    1f:e9:23:e3:80:ee:ab:d5:7d:22:53:e4:37:ea:93:
                    f1:71:11:1f:a0:ea:8a:90:1a:b2:8d:07:9e:6b:eb:
                    67:23:ad:ac:8f:d5:a3:f6:7f:9e:c4:07:bd:2e:40:
                    23:30:d0:d1:7c:b0:af:4b:b2:ae:af:12:2f:8b:42:
                    1c:58:4c:ec:eb:d5:87:f5:ee:20:fa:8a:b2:a7:0e:
                    94:a5:34:94:71:38:58:78:7e:f3:8e:ff:7d:7b:98:
                    c3:79:30:a2:a3:5f:17:df:11:ed:20:89:04:15:f1:
                    76:73:66:77:72:67:7c:94:86:6a:3d:cb:6b:40:51:
                    31:1a:6d:bf:46:ac:8a:a8:a8:82:dc:25:41:f4:f1:
                    37:b1:08:5d:69:d2:eb:86:5e:be:e9:17:d9:c7:ee:
                    6e:33:9d:f3:21:36:64:dd:63:bf:58:70:6a:16:32:
                    ab:7a:47:af:2b:75:32:db:94:c8:dd:8a:77:e7:cb:
                    c9:fb:8b:09:29:fb:3b:a8:01:39:89:8a:b5:29:c8:
                    75:25:4c:5b:a1:3e:c0:62:0d:16:97:77:3d:8d:a5:
                    e1:a0:79:6a:62:99:c5:10:30:a8:46:41:f2:f5:dd:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:D2:15:B2:42:98:84:D6:73:D9:1C:49:48:28:DC:16:02:E0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb49f5e7-290c-3d5e-a153-9737a1c938d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:1e:f5:0e:86:27:72:cb:b3:65:8e:63:3a:b3:2c:53:65:
         1a:8f:1d:7b:0c:83:82:9d:73:a3:1b:66:f8:be:40:22:25:ad:
         1b:d0:97:bf:51:e0:28:4b:7a:d5:41:dc:40:d2:f4:31:ce:4f:
         49:bc:59:63:df:3b:12:1f:95:39:11:6c:5b:bd:f6:4e:38:c4:
         99:1b:f2:7d:35:5a:70:69:fc:63:5d:e5:9c:30:63:d6:97:31:
         fc:81:0c:2c:7f:1f:39:b2:af:f6:49:1d:5a:54:cf:34:9a:19:
         0c:2b:3f:cd:9f:05:f5:f2:e5:b2:90:df:50:20:17:ee:58:74:
         29:9d:9b:db:69:4c:de:66:1e:3d:bc:52:df:67:7d:2c:0b:24:
         e2:53:2e:e5:48:87:33:69:aa:8c:db:a4:0f:ff:a7:75:88:6f:
         02:db:b0:1b:78:e2:41:ef:a2:f3:b1:54:85:6f:a6:49:9e:c0:
         c9:f8:03:f1:c6:1a:dc:dc:78:62:c2:7c:e4:d5:35:be:18:e8:
         59:eb:fd:df:89:fe:e4:79:9b:df:97:dc:68:ae:01:96:61:b9:
         26:d5:95:53:72:94:43:89:8e:cd:20:05:ea:fc:77:ae:ce:fe:
         f3:42:a1:95:d5:8a:8d:c5:06:ad:ab:91:0b:30:d1:28:e2:db:
         b6:f4:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:49 2024 by rpki-client on console-fra.rpki-client.org